Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: d+CArEYOJReUi2fRJ8aBdkJZaH0YApwAUtx+lBCmtNo=
Subject key identifier: 49:36:38:68:2D:75:4F:29:8F:51:61:3D:0C:A6:08:F2:0A:BC:90:E4
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 0197474254421EF0BDDDDCF8CFD113AB2B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 088A
Signing time: Fri 06 Jun 2025 22:00:18 +0000
Manifest this update: Fri 06 Jun 2025 22:00:18 +0000
Manifest next update: Sat 07 Jun 2025 22:00:18 +0000
Files and hashes: 1: jODSDZiB_9CDcQXiT4tsxNlR8Ac.roa (hash: JEMeTXjwzca2z04dyMlf/bVf4aF3EAXQNY7E1cjOdx4=)
2: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: v0VW4OWb5GBQVaQ/8G4A4f2WNmGxzfj8A+SQT5+duq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:54:42:1e:f0:bd:dd:dc:f8:cf:d1:13:ab:2b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Jun 6 22:00:18 2025 GMT
Not After : Jun 7 22:00:18 2025 GMT
Subject: CN=493638682d754f298f51613d0ca608f20abc90e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9d:ee:ee:c2:f3:87:20:95:89:dd:3a:53:04:
c2:53:72:38:79:06:b9:c6:ba:84:24:07:28:06:f9:
6e:f9:9f:81:10:22:6a:00:8e:81:67:98:13:6a:82:
77:8f:2b:51:8e:45:d1:0b:9d:e6:4b:35:5f:59:63:
2b:4d:36:ff:07:7f:e3:4e:13:9a:8b:e2:ac:3c:de:
b9:4c:d2:13:ea:85:9d:12:b8:43:a9:af:75:2d:0b:
ce:31:73:cc:d4:aa:a6:0f:98:88:c3:76:ef:46:f9:
bd:71:bb:2d:ac:2f:4d:a8:98:06:b9:48:58:e9:4e:
37:94:46:01:99:57:17:0e:7f:ae:2f:54:1c:b5:7c:
5e:48:30:2c:69:30:58:2d:4d:7c:24:c1:30:18:01:
d2:2b:6e:1a:62:2a:63:c5:44:ee:94:e2:ec:96:02:
41:eb:ab:b4:53:96:8c:ca:25:1b:ab:59:07:9e:ab:
b0:a0:ad:bd:f1:3c:b3:17:b1:d4:39:f8:97:70:c2:
35:a8:39:d5:e5:87:1c:0c:ed:b2:15:be:cd:87:f3:
ff:54:6c:7f:71:3f:7b:3c:60:cc:86:45:7f:0b:43:
20:59:ee:af:22:7e:76:d6:64:7a:69:07:c0:14:e3:
48:f9:2f:b8:38:99:64:02:4c:46:5d:ed:49:cf:e8:
9a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:36:38:68:2D:75:4F:29:8F:51:61:3D:0C:A6:08:F2:0A:BC:90:E4
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:92:a1:f7:0e:0c:e6:5b:1f:86:16:a8:7a:58:8b:44:51:3e:
97:38:c7:8c:7b:c3:51:23:82:a4:70:23:85:80:68:89:d4:c8:
d0:67:69:95:42:c1:60:23:80:95:01:3d:be:52:51:17:7b:19:
ad:41:11:3c:38:13:c3:dc:53:13:37:8b:40:19:7f:6c:95:1a:
1c:81:12:a3:48:b3:00:ea:5a:84:96:17:15:16:5a:f7:2f:a4:
55:8e:04:da:d0:31:c4:80:01:0f:04:0b:01:73:44:bf:12:1d:
75:48:98:4a:9c:4e:2a:88:00:53:46:3a:0d:ed:72:ec:4f:ca:
c7:25:d4:7d:d1:b9:7d:af:00:f1:7b:55:24:fe:57:81:a8:46:
54:b7:90:24:14:7d:96:c9:dd:8b:0f:a6:50:dc:37:e8:fc:71:
5a:14:26:c3:e7:4b:4d:83:09:5c:3c:70:e1:b6:a0:7e:81:2f:
f9:23:00:2a:a4:f3:69:7b:80:f5:16:43:be:9f:f6:67:14:3b:
c8:50:a2:c8:8d:5f:73:59:ea:55:95:59:41:a5:37:e7:6c:c2:
31:74:79:f3:ef:e5:4b:4b:8b:48:4f:24:61:6e:86:e5:32:90:
18:21:e6:0a:3e:96:b1:aa:3d:7d:fe:9c:57:bc:40:1f:b3:d0:
af:3b:45:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQlRCHvC93dz4z9ETqysdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZDIzYWUyOGNkODYwYzhlZGZkNjE4MzU2ZjhiMzFmNWU0
ZGM5MjgwHhcNMjUwNjA2MjIwMDE4WhcNMjUwNjA3MjIwMDE4WjAzMTEwLwYDVQQD
Eyg0OTM2Mzg2ODJkNzU0ZjI5OGY1MTYxM2QwY2E2MDhmMjBhYmM5MGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp3u7sLzhyCVid06UwTCU3I4eQa5
xrqEJAcoBvlu+Z+BECJqAI6BZ5gTaoJ3jytRjkXRC53mSzVfWWMrTTb/B3/jThOa
i+KsPN65TNIT6oWdErhDqa91LQvOMXPM1KqmD5iIw3bvRvm9cbstrC9NqJgGuUhY
6U43lEYBmVcXDn+uL1QctXxeSDAsaTBYLU18JMEwGAHSK24aYipjxUTulOLslgJB
66u0U5aMyiUbq1kHnquwoK298TyzF7HUOfiXcMI1qDnV5YccDO2yFb7Nh/P/VGx/
cT97PGDMhkV/C0MgWe6vIn521mR6aQfAFONI+S+4OJlkAkxGXe1Jz+iaDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEk2OGgtdU8pj1FhPQymCPIKvJDkMB8GA1UdIwQY
MBaAFJfSOuKM2GDI7f1hg1b4sx9eTckoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWIt
Y2ZhNmE5MTQ4MWUyLzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWItY2ZhNmE5MTQ4MWUy
LzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJKh9w4M
5lsfhhaoeliLRFE+lzjHjHvDUSOCpHAjhYBoidTI0GdplULBYCOAlQE9vlJRF3sZ
rUERPDgTw9xTEzeLQBl/bJUaHIESo0izAOpahJYXFRZa9y+kVY4E2tAxxIABDwQL
AXNEvxIddUiYSpxOKogAU0Y6De1y7E/KxyXUfdG5fa8A8XtVJP5XgahGVLeQJBR9
lsndiw+mUNw36PxxWhQmw+dLTYMJXDxw4bagfoEv+SMAKqTzaXuA9RZDvp/2ZxQ7
yFCiyI1fc1nqVZVZQaU352zCMXR58+/lS0uLSE8kYW6G5TKQGCHmCj6Wsao9ff6c
V7xAH7PQrztFYg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:55:57 2025 by rpki-client